Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Regression: Less secure CSP #367

Open
xi opened this issue Jun 17, 2020 · 0 comments · May be fixed by #390
Open

Regression: Less secure CSP #367

xi opened this issue Jun 17, 2020 · 0 comments · May be fixed by #390

Comments

@xi
Copy link
Collaborator

xi commented Jun 17, 2020

In #240 I tried to improve security by adding a content security policy and refactoring the code to avoid unsafe patterns like inline javascript.

5bb9910 went in the opposite direction and re-allowed an unsafe feature (eval). I guess that was required for the new dependency on alpine.js.

I guess this decision can be justified. However, I also know that there are plenty of similar javascript frameworks that do not rely on unsafe features. Is it possible to switch to one of those?
@xi xi changed the title Regression: Less safe CSP Regression: Less secure CSP Jan 27, 2021
@xi xi linked a pull request Jul 20, 2021 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Remove alpine.js MPIB/Lagerregal
1 participant
@xi